[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #267 2004-9-13->2004-9-17

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #267 2004-9-13->2004-9-17
From: Tsuneo Ogasawara <t.ogsawr@xxxxxxxxx>
Date: Thu, 31 Mar 2005 17:43:42 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B
$B?t%v7n4V!"Ej9F$rCfCG$7$F$$$?(B SecurityFocus Newsletter $B$NOBLu$G$9$,!"$3$l$h(B
$B$j:F3+$5$;$FD:$-$^$9!#K\9f$OA02sEj9F$7$?http://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: 21 Sep 2004 17:55:31 -0700 (MST)
(BMessage-ID: <20040921175531.18193.qmail@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #267
(B-----------------------------
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. Examining a Public Exploit, Part 2
(B     2. Academia Headaches
(B     3. Metasploit Framework, Part 3
(BII. BUGTRAQ SUMMARY
(B     1. John Sterling Mod_cplusplus Buffer Overflow Vulnerability
(B     2. Webmin / Usermin Installation Insecure Temporary File Creati...
(B     3. Apache mod_ssl Remote Denial of Service Vulnerability
(B     4. RhinoSoft Serv-U FTP Server Remote Denial Of Service Vulnera...
(B     5. Samba Multiple ASN.1 and MailSlot Parsing Remote Denial Of S...
(B     6. Multiple Vendor MIME Encapsulation Content Checking Filter B...
(B     7. Gadu-Gadu Image Send Feature Remote Heap Overflow Vulnerabil...
(B     8. Jigunet TwinFTP Server Directory Traversal Vulnerability
(B     9. PerlDesk Language Variable Server-Side Script Execution Vuln...
(B     10. Pingtel Xpressa Handset Remote Denial Of Service Vulnerabili...
(B     11. Lexar JumpDrive Secure USB Flash Drive Insecure Password Sto...
(B     12. FocalMedia.net Turbo Seek Information Disclosure Vulnerabili...
(B     13. QNX Photon MicroGUI Multiple Utility Server Flag Buffer Over...
(B     14. QNX Crrtrap Path Environment Variable Local Command Executio...
(B     15. Mozilla Firefox Default Installation File Permission Vulnera...
(B     16. ZyXEL P681 ARP Request Information Disclosure Vulnerability
(B     17. Multiple BEA Systems WebLogic Vulnerabilities
(B     18. Mozilla Browser Non-ASCII Hostname Heap Overflow Vulnerabili...
(B     19. Mozilla Multiple URI Processing Heap Based Buffer Overflow V...
(B     20. Mozilla Browser BMP Image Decoding Multiple Integer Overflow...
(B     21. Microsoft WordPerfect Converter Remote Buffer Overflow Vulne...
(B     22. Microsoft GDI+ Library JPEG Segment Length Integer Underflow...
(B     23. Mozilla Browser Vcard Handling Remote Buffer Overflow Vulner...
(B     24. SUS Format String Vulnerability
(B     25. Mozilla/Firefox Browsers URI Drag And Drop Cross-Domain Scri...
(B     26. Inkra 1504GX Remote Denial Of Service Vulnerability
(B     27. Mozilla/Firefox Browsers Unauthorized Clipboard Contents Dis...
(B     28. SnipSnap HTTP Response Splitting Vulnerability
(B     29. McAfee VirusScan System Scan Local Privilege Escalation Vuln...
(B     30. Apache Web Server Configuration File Environment Variable Lo...
(B     31. CUPS UDP Packet Remote Denial Of Service Vulnerability
(B     32. LinuxPrinting.org Foomatic-Filter Command Execution Vulnerab...
(B     33. Apache Mod_DAV LOCK Denial Of Service Vulnerability
(B     34. Multiple Browser Cross-Domain Cookie Injection Vulnerability
(B     35. Apache Web Server Remote IPv6 Buffer Overflow Vulnerability
(B     36. HP Web Jetadmin Unspecified Arbitrary Command Execution Vuln...
(B     37. MyServer Directory Traversal Vulnerability
(B     38. PHP Unspecified Remote Arbitrary File Upload Vulnerability
(B     39. BBS E-Market Professional Multiple File Disclosure Vulnerabi...
(B     40. Mozilla/Firefox Browsers Tar.GZ Archive Weak Permissions Vul...
(B     41. vBulletin SQL Injection Vulnerability
(B     42. Mozilla/Firefox Browsers PrivilegeManager EnablePrivilege Di...
(B     43. GDK-Pixbuf Multiple Vulnerabilities
(B     44. LibXpm Image Decoding Multiple Remote Buffer Overflow Vulner...
(B     45. SMC7004VWBR and SMC7008ABR Authentication Bypass Vulnerabili...
(B     46. GNU Radius SNMP String Length Remote Denial Of Service Vulne...
(B     47. IBM OEM Microsoft Windows XP And Windows XP SP1 Default Admi...
(B     48. Microsoft Internet Explorer User Security Confirmation Bypas...
(B     49. Snitz Forums Down.ASP HTTP Response Splitting Vulnerability
(B     50. Microsoft Windows XP Explorer.EXE TIFF Image Denial of Servi...
(B     51. Tech-Noel Pigeon Server Remote Denial Of Service Vulnerabili...
(B     52. Sudo Information Disclosure Vulnerability
(B     53. Xine-lib DVD Subpicture Decoder Heap Overflow Vulnerability
(B     54. Xine-lib VideoCD And Text Subtitle Stack Overflow Vulnerabil...
(B     55. Apple iChat Remote Link Application Execution Vulnerability
(B     56. Business Objects WebIntelligence Access Control Bypass File ...
(B     57. Business Objects WebIntelligence Remote File Name HTML Injec...
(B     58. Google Toolbar About.HTML HTML Injection Vulnerability
(B     59. MacOSXLabs RsyncX Local Privilege Escalation Vulnerability
(B     60. MacOSXLabs RsyncX Insecure Temporary File Creation Vulnerabi...
(B     61. DNS4Me Denial Of Service And Cross-Site Scripting Vulnerabil...
(B     62. YaBB Administrator Command Execution Vulnerability
(B     63. YaBB YaBB.pl IMSend Cross-Site Scripting Vulnerability
(B     64. Samba Samba-VScan Undisclosed Denial Of Service Vulnerabilit...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Feds say Lamo inspired other hackers
(B     2. Microsoft warns of poisoned picture peril
(B     3. Mitnick movie comes to the U.S.
(B     4. WLANs go feral in corporate undergrowth
(B     5. Merger creates world's biggest IT security services firm
(B     6. Rise of the Botnets
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. EPX Crypting Software 2.1
(B     2. Hacme Bank 1.0
(B     3. ID-Synch 3.1
(B     4. Nmap v3.70
(B     5. DmpE32 -Symbian Executable Information Dumper 1.0
(B     6. IP Firewall Hook ATL/COM 1.2
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. John Sterling Mod_cplusplus Buffer Overflow Vulnerability
(BBugTraq ID: 11152
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 10 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11152
$BMWLs(B:
(BJohn Sterling mod_cplusplus $B$O(B C++ $B8@8l$G(B Apache $B%b%8%e!<%k$r:n@.$9$k$?(B
$B$a$N%U%l!<%`%o!<%/$G!"(Bmod_perl $B$HF1MM$K5!G=$9$k$h$&@_7W$5$l$F$$$^$9!#(B
(B
(Bmod_cplusplus $B$K$O%P%C%U%!%*!<%P!<%U%m!<$rH/@8$5$;$kLdBj$N$"$k$3$H$,Js9p(B
$B$5$l$F$$$^$9!#(B
(B
$B$3$l$K$h$j!"0U?^E*$K:n@.$5$l$?%G!<%?$K$h$C$F8GDj%5%$%:$N%a%b%j%P%C%U%!$,(B
$B>e=q$-$5$l!"NY@\$9$k%a%b%jNN0h$,GK2u$5$l$k2DG=@-$,$"$j$^$9!#$=$N7k2L!"%5!<(B
$B%S%9ITG=>uBV$K4Y$k!"$"$k$$$OG$0U$N%3!<%I$,http://www.securityfocus.com/bid/11153
$BMWLs(B:
(BWebmin $B$*$h$S(B Usermin $B$O!"%$%s%9%H!<%k;~$K%;%-%e%j%F%#>eITE,@Z$JJ}K!$G0l(B
$B;~%U%!%$%k$r:n@.$9$k$3$H$,Js9p$5$l$F$$$^$9!#$=$N$?$a!":n@.$5$l$?0l;~%U%!(B
$B%$%k$KM=B,2DG=$J%U%!%$%kL>$,;HMQ$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k%m!<%+%k$N967be=q$-$9$k2DG=@-$,$"$j$^$9!#(B
(B
(BUsermin $B$K$D$$$F$O(B 1.090 $B$h$jA0$N%P!<%8%g%s!"(BWebmin $B$K$D$$$F$O(B 1.150 $B0J(B
$BA0$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11154
$BMWLs(B:
(BApache 2.x mod_ssl $B$K%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kLdBj(B
$B$N5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O$*$=$i$/!"Nc30E*$J>u67$N=hM}$,(B
$BE,@Z$K9T$o$l$J$$$3$H$,860x$G$9!#LdBj$O!"(Bssl_engine_io.c $B%U%!%$%k$N(B
(Bchar_buffer_read $B4X?t$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$,>7$/7k2L$H$7$F$O!";R%W%m%;%9$,%5!<%S%9ITG=>uBV$K4Y$k$3$H$N$_$,(B
$B9M$($i$l$^$9!#$3$N(B BID $B$O!">\:Y$J>pJs$,8x3+$5$l$N%P!<(B
$B%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11155
$BMWLs(B:
(BServ-U FTP Server $B$K!"%5!<%S%9ITG=>uBV$K4Y$kLdBj$N5?$$$,$"$k$3$H$,Js9p$5(B
$B$l$F$$$^$9!#$3$NLdBj$O!"Nc30E*$J>u67$N=hM}$KITHw$,$"$k$?$a$KH/@8$7$^$9!#(B
(B
$B$3$NLdBj$O!"(BServ-U FTP Server $B$,FCDj$N(B STOU $B%3%^%s%I$r=hM}$9$k$3$H$r>7$-(B
$B$^$9!#$9$Y$F$N%P!<%8%g%s$N(B Serv-U $B$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11156
$BMWLs(B:
(BSamba $B$K$O%j%b!<%H$+$i%5!<%S%9ITG=>uBV$K4Y$i$;$kLdBj$,J#?tB8:_$9$k$3$H$,(B
$BJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"(BASN.1 $B$*$h$S(B MailSlot $B%Q%1%C%H$N2rhttp://www.securityfocus.com/bid/11157
$BMWLs(B:
(BMIME $B$N%+%W%;%k2=$K4X$9$k5,3J(B (RFC 822$B!"$*$h$S(B 2045 $B!A(B 2049) $B$,ITL@NF$G(B
$B$"$k$3$H$KM3Mh$7$F!"B??t$N%=%U%H%&%'%"$Ne5-$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11158
$BMWLs(B:
(BGadu-Gadu $B$N2hA|Aw?.5!G=$K%j%b!<%H$+$i%R!<%W%*!<%P!<%U%m!<$rH/@8$5$;$kLd(B
$BBj$N5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"6-3&%A%'%C%/$,E,@Z$K9T$o$l(B
$B$F$$$J$$$3$H$KM3Mh$7$F$$$^$9!#%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11159
$BMWLs(B:
(BTwinFTP Server $B$K%G%#%l%/%H%j%H%i%P!<%5%k967b$rH$K4X$9$kJ8;zNs$,4^$^$l$F$$$k>l9g$K$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B%j%b!http://www.securityfocus.com/bid/11160
$BMWLs(B:
$B%5!<%P%5%$%I%9%/%j%W%H$,o$O(BWeb $B%5!<%P$Nl9g$G$b!">pJs(B
$B$rC%l9g$KI=<($5$l$k%(%i!<%a%C%;!<%8$K$O!"@x:_E*$K=EMW$J>pJs$,(B
$B4^$^$l$F$$$k2DG=@-$,$"$j$^$9!#I8E*%7%9%F%`$K$D$$$F$N==J,$JCN<1$,$"$k>l9g!"(B
$B967b$N4{B8$N%9%/%j%W%H$rhttp://www.securityfocus.com/bid/11161
$BMWLs(B:
(BPingtel Xpressa $B$NEEOCCuBV$K4Y$i$;$kLd(B
$BBj$N5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(BXpressa $B$N4IM}(B Web $B%5!<%P(B
$B$G=hM}$5$l$k(B HTTP $BMW5a$KBP$9$k6-3&%A%'%C%/$,E,@Z$K9T$o$l$F$$$J$$$?$a$KB8(B
$B:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11162
$BMWLs(B:
(BLexar JumpDrive Secure USB Flash Drive $B$K%;%-%e%j%F%#>e0BA4$G$J$$J}K!$G(B
$B%Q%9%o!<%I$,J]4I$5$l$kLdBj$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#@_7W%_%9$,860x$G!"(B
$B%G%P%$%9>e$G%Q%9%o!<%I$,0BA4$G$O$J$$J}K!$GJ]4I$5$l$^$9!#(B
(B
$B967b!<%s$rJ]8n$9$k%Q%9%o!<%I$NF~http://www.securityfocus.com/bid/11163
$BMWLs(B:
(BTurbo Seek $B$K$O>pJsO31L$r>7$/5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B967bpJs$,4^$^$l$F$$$k2D(B
$BG=@-$,$"$j$^$9!#C%pJs$r$b$H$K!"$5$i$J$k967b$,http://www.securityfocus.com/bid/11164
$BMWLs(B:
(BQNX Photon MicroGUI $B$K$O!"(BMicroGUI $B%f!<%F%#%j%F%#$K%P%C%U%!%*!<%P!<%U%m!<(B
$B$,H/@8$9$kLdBj$,J#?tB8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<(B
$B%6$,F~NO$7$?J8;zNs$ND9$5$N%A%'%C%/$rE,@Z$K9T$o$J$$$^$^!"$=$NJ8;zNs$r8GDj(B
$B$N%W%m%;%9%P%C%U%!$K%3%T!<$7$F$7$^$&$3$H$KM3Mh$7$^$9!#(B
(B
$B967be$GG$0U$N%3!<%I$ro!"$3$l$i$N%"%W(B
$B%j%1!<%7%g%s$K$O(B setuid $B%S%C%H$,IUM?$5$l$F$$$^$9!#(B
(B
(B14. QNX Crrtrap Path Environment Variable Local Command Executio...
(BBugTraq ID: 11165
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Sep 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11165
$BMWLs(B:
(Bcrrtrap $B$G;HMQ$5$l$k30Ite$G8"8B$r>:3J$G$-$k2DG=@-$,$"$j$^$9!#(B
(B
(B15. Mozilla Firefox Default Installation File Permission Vulnera...
(BBugTraq ID: 11166
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Sep 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11166
$BMWLs(B:
(BMozilla Firefox $B$K$O!"ITE,@Z$J%U%!%$%k$N%Q!<%_%C%7%g%s$,@_Dj$5$l$kLdBj$N(B
$B$"$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O!"(BMozilla Foundation $B$,H/9T$7$?(B
(BLinux $B%"!<%+%$%V$K$N$_B8:_$9$k$HJs9p$5$l$F$$$^$9!#B?$/$N(B Linux $B%G%#%9%H(B
$B%j%S%e!<%7%g%s$K4^$^$l$k%Q%C%1!<%84IM}%=%U%H%&%'%"$r;HMQ$7$F(B Mozilla
(BFirefox $B$r%$%s%9%H!<%k$7$?>l9g$K$O$3$NLdBj$OB8:_$7$J$$$3$H$,M=B,$5$l$^$9!#(B
(B
(BFirefox $B$,%$%s%9%H!<%k$5$l$F$$$k%3%s%T%e!<%?$KBP$7$F%$%s%?%i%/%F%#%V$J%m!<(B
$B%+%k%"%/%;%98"8B$r=jM-$9$k967be=q$-$,2DG=$G$9!#$3$l$K$h$j!"(BFirefox $B$rl9g!"(Broot $B=jM-$N%U%!%$%k$N%Q!<%_%C%7%g%s$,(B $B!H$9$Y$F$N%f!<(B
$B%6$,=q$-9~$_2DG=(B (world writable)$B!I(B $B$H$J$k$?$a!"(BFirefox $B$rhttp://www.securityfocus.com/bid/11167
$BMWLs(B:
(BZyXEL Prestige 681 SDSL $B%k!<%?$K$O>pJs$,O31L$9$k2DG=@-$N$"$k$3$H$,Js9p$5(B
$B$l$F$$$^$9!#(B
(B
$B967be$N%M%C%H%o!<%/%H%i%U%#%C%/$rK5pJs$r$b$H$K!"LdBj$N$"$k%G%P%$%9$rMxMQ$7$F$$$k%7%9%F%`$*(B
$B$h$S%5!<%S%9$KBP$7$F967b$9$k2DG=@-$,$"$j$^$9!#(B
(B
(BZyNOS $B%P!<%8%g%s(B Vt020225a $B$,$3$NLdBj$N1F6A$r$N%G%P%$%9$*$h$S(B
$B%P!<%8%g%s$b$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11168
$BMWLs(B:
(BBEA Systems $B$O!"(BWebLogic Server $B$*$h$S(B Express $B$KB8:_$9$kJ#?t$NLdBj$KBP(B
$B=h$9$k$?$a$N%"%I%P%$%6%j$rH/I=$7$^$7$?!#$3$l$i$NLdBj$O!"IT@5%"%/%;%9$d>p(B
$BJsO31L$r5v$7$F$7$^$&!"$"$k$$$O%m!<%k$*$h$S%]%j%7!<$N%;%-%e%j%F%#$KBP$9$k(B
$B6<0R$H$J$k2DG=@-$,$"$j$^$9!#(B
(B
(B18. Mozilla Browser Non-ASCII Hostname Heap Overflow Vulnerabili...
(BBugTraq ID: 11169
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11169
$BMWLs(B:
(BMozilla $B$K$O!"(BASCII $B0J30$NJ8;z$r4^$s$@(B URI $B$r%V%i%&%6$,=hM}$7$?>l9g$K!"(B
$B%j%b!<%H$+$i$N0-MQ$,2DG=$J%R!<%W%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N5?$$$,$"$j(B
$B$^$9!#(B
(B
$B0U?^E*$K:n@.$7$?(B URI $B$r;2>H$9$k%O%$%Q!<%j%s%/$r3+$/$h$&M6F3$9$k$3$H$K$h(B
$B$j!"I8E*%f!<%6$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11170
$BMWLs(B:
(BMozilla $B$K$O!"EE;R%a!<%k$K4^$^$l$k(B URI $B$r=hM}$7$?>l9g$K!"%R!<%WNN0h$G%P%C(B
$B%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$,J#?tB8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$,F~NO$7$?J8;zNs$,8GDj$N%W%m%;%9%P%C%U%!$K%3%T!<$5$l(B
$B$kA0$K!"$=$NJ8;zNsD9$,8!>Z$5$l$J$$ITHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11171
$BMWLs(B:
$B%V%i%&%6$N(B Mozilla $B$K$O!"2hA|2ruBV$K4Y$l$k$3$H$,2DG=$G$9!#$^$?(B
$B$O!"G$0U$N%3!<%I$r$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/11172
$BMWLs(B:
(BMicrosoft WordPerfect Converter $B$K$O!"0U?^E*$K:n@.$5$l$?%j%b!<%H$+$i$N%U%!(B
$B%$%k$r=hM}$9$k:]$K%j%b!<%H$+$i%P%C%U%!%*!<%P!<%U%m!<$rH/@8$5$;$kLdBj$N5?(B
$B$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$rMxMQ$9$k%j%b!<%H$N967be$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11173
$BMWLs(B:
(BMicrosoft (Graphics Device Interface) GDI+ JPEG $B%O%s%I%i$K$O!"(BJPEG $B7A<0(B
$B$N2hA|$r=hM}$9$k:]$K@0?t%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N5?$$$N$"$k$3$H$,Js(B
$B9p$5$l$F$$$^$9!#$3$NLdBj$O!"%a%b%j%3%T!<$NA`:n$K$*$$$FFCDj$N(B JPEG $B%G!<%?(B
$B$r6-3&CM$H$7$F;HMQ$9$kA0$K!"$3$N%G!<%?$KBP$7$F==J,$J%A%'%C%/$,9T$o$l$F$$(B
$B$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B0U?^E*$K:n@.$5$l$?(B JPEG $B2hA|%U%!%$%k$K$h$C$F!"$3$NLdBj$,0z$-5/$3$5$l!"G$(B
$B0U$N%3!<%I$,l9g!"G$0U$N%3!<%I$O$3$N%"%W(B
$B%j%1!<%7%g%s$rhttp://www.securityfocus.com/bid/11174
$BMWLs(B:
(BMozilla $B%V%i%&%6$K$O!"0-0U$N$"$k(B vCard $B%U%!%$%k$r=hM}$7$?>l9g$K!"%j%b!<(B
$B%H$+$iMxMQ2DG=$J%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N5?$$$N$"$k$HJs9p$5(B
$B$l$F$$$^$9!#$3$NLdBj$O!"(BMozilla $B$K$h$k6-3&%A%'%C%/$,==J,$K9T$o$l$F$$$J$$(B
$B$3$H$KM3Mh$7$^$9!#$3$NLdBj$rMxMQ$9$k%j%b!<%H$N967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/11176
$BMWLs(B:
(BSUS $B$N%m%.%s%05!G=$K%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#$3$NLdBj$O!"%U%)!<%^%C%H$5$l$?%W%j%s%H4X?t$K$*$$$F%f!<%6F~NO$r(B
$B=q<0;XDj;R$H$7$F;HMQ$9$kA0$K!"%f!<%6F~NO$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K9T(B
$B$o$l$F$$$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B%a%C%;!<%8$N%5%$%?%$%:$,ITE,@Z$G$"$k$?$a!"$9$Y$F$N%U%)!<%^%C%H%9%H%j%s(B
$B%0$N;XDj;R$O(B syslog() $B4X?t$K$h$C$F$=$N$^$^2rhttp://www.securityfocus.com/bid/11177
$BMWLs(B:
(BMozilla $B$*$h$S(B Firefox $B$K!"%/%m%9%I%a%$%s%9%/%j%W%F%#%s%0$NLdBj$N5?$$$N(B
$B$"$k$3$H$,Js9p$5$l$F$$$^$9!#(BURI $B%j%s%/$,%V%i%&%6%&%#%s%I%&$+$iJL$N%V%i%&(B
$B%6%&%#%s%I%&$K%I%i%C%0!u%I%m%C%W$5$l$k$H!"K\MhE,MQ$5$l$k$Y$-F1$8%]%j%7$N(B
$B%;%-%e%j%F%#%A%'%C%/$,2sHr$5$l$F$7$^$&$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B0-0U$"$k(B Web $B%5%$%H$GFCDj$Nl9g!"I8E*%I%a%$%s$N%;%-%e%j%F%#%3%s(B
$B%F%-%9%HFb$GG$0U$N%9%/%j%W%H%3!<%I$,http://www.securityfocus.com/bid/11178
$BMWLs(B:
(BInkra 1504GX $B$K%5!<%S%9ITG=>uBV$K4Y$kLdBj$,Js9p$5$l$F$$$^$9!#(B
(B
$B0U?^E*$K:n@.$5$l$?FCDj$N(B IP $B%Q%1%C%H$rl9g$K$3$NLdBj$,H/@8$7$^$9!#(B
$B$3$NLdBj$r0-MQ$9$k$?$a$K$O!"I8E*$H$J$k%9%$%C%A$,FCDj$N>uBV$K@_Dj$5$l$F$$(B
$B$kI,MW$,$"$j$^$9!#(B
(B
$B%j%b!<%H$N967b$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/11179
$BMWLs(B:
(BMozilla $B$*$h$S(B Firefox $B$NN>%V%i%&%6$K$O!"%/%i%$%"%s%H%f!<%6$N%/%j%C%W%\!<(B
$B%I$NFbMF$,%j%b!<%H%5%$%H$+$i%"%/%;%9$5$l$F$7$^$&LdBj$N$"$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"(BTextArea $B$K$*$$$F0BA4$G$O$J$$FCDj$N%9%/%j%W%F%#%s%0A`:n$,5v(B
$B2D$5$l$F$$$k$3$H$KM3Mh$7$^$9!#7k2L$H$7$F!"%/%j%C%W%\!<%I$NFbMF$,O31L$9$k!"(B
$B$*$h$S0-0U$"$k(B Web $B%5%$%H$+$i%f!<%6$N%/%j%C%W%\!<%I$K=q$-9~$_$5$l$k2DG=(B
$B@-$,$"$j$^$9!#(B
(B
(B28. SnipSnap HTTP Response Splitting Vulnerability
(BBugTraq ID: 11180
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11180
$BMWLs(B:
(BSnipSnap $B$K$O!"(BHTTP $B1~Ez$,J,3d$5$l$kLdBj$N5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^(B
$B$9!#$3$NLdBj$O(B referer $B%Q%i%a!<%?$KM3Mh$7$F$*$j!"(BPOST $BMW5a$Nhttp://www.securityfocus.com/bid/11181
$BMWLs(B:
$BJs9p$K$h$k$H!"(BMcAfee VirusScan $B$K$O%m!<%+%k$N8"8B>:3J$NLdBj$,B8:_$7$^$9!#(B
$B$3$NLdBj$O!"(BLOCAL SYSTEM $B8"8B$r3MF@$7$?8e$K$3$N8"8B$r9_3J$7$J$$$H$$(B
$B$&@_7W>e$NITHw$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k%m!<%+%k$N967be$G(B LOCAL SYSTEM $B8"8B$rC%http://www.securityfocus.com/bid/11182
$BMWLs(B:
$BJs9p$K$h$k$H!"(BApache Web Server $B$K$O@_Dj%U%!%$%k$N4D6-JQ?t$K%m!<%+%k$GMx(B
$BMQ2DG=$J%P%C%U%!%*!<%P!<%U%m!<$NLdBj$,B8:_$7$^$9!#$3$NLdBj$O!"%f!<%6$,F~(B
$BNO$7$?J8;zNs$,8GDj$N%W%m%;%9%P%C%U%!$K%3%T!<$5$l$kA0$K!"$=$NJ8;zNsD9$,8!(B
$B>Z$5$l$J$$ITHw$KM3Mh$7$^$9!#(B
(B
$B967be$Ghttp://www.securityfocus.com/bid/11183
$BMWLs(B:
(BCUPS $B$K$O!"%j%b!<%H$+$i(B UDP $B%]!<%H(B 631 $BHV$KAw?.$5$l$?!"%Q%1%C%HD9$K%<%m$,(B
$B;XDj$5$l$F$$$kFCDj$N(B UDP $B%Q%1%C%H$K$h$j!"%5!<%S%9ITG=>uBV$K4Y$kLdBj$N5?$$(B
$B$,$"$j$^$9!#(B
(B
(B32. LinuxPrinting.org Foomatic-Filter Command Execution Vulnerability
(BBugTraq ID: 11184
(BRemote: $B$"$j(B
$B8xI=F|(B: Sep 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11184
$BMWLs(B:
(BLinuxPrinting.org $B$N(B Foomatic-Filter $B$K$O!"G$0U$N%3%^%s%I$,http://www.securityfocus.com/bid/11185
$BMWLs(B:
(BApache $B$N(B mod_dav $B%b%8%e!<%k$K$O!"%5!<%S%9ITG=>uBV$K4Y$kLdBj$N$"$k$3$H$,(B
$BJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"(BApache $B$G(B mod_dav $B%b%8%e!<%k$r;HMQ$9$k$h$&$K@_Dj$5$l$F$*$j!"(B
$B5v2D$5$l$F$$$k%f!<%6$+$iAw?.$5$l$?(B LOCK $B%3%^%s%I$NFCDj$N%7!<%1%s%9$rl9g$K$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B%j%b!<%H$N967bl9g!"(BApache $B$,40A4$K%/%i%C%7%e$5$;$i$l$k2DG=@-$,$"$j$^$9!#(B
$B%9%l%C%I$G$O$J$/!"J#?t$N%W%m%;%9$r;HMQ$9$k$h$&@_Dj$5$l$F$$$k>l9g$K$O!"8D(B
$BJL$N(B Web $B%5!<%P%W%m%;%9$,%/%i%C%7%e$7$^$9!#;}B3E*$J967b$K$h$j!"J#?t$N%5!<(B
$B%P%W%m%;%9$r%/%i%C%7%e$5$;!"%5!<%S%9ITG=>uBV$K4Y$i$;$k$3$H$,2DG=$G$9!#(B
(B
(B2.0.51 $B$h$j$bA0$N(B Apache 2.0 $B$NA4%P!<%8%g%s$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11186
$BMWLs(B:
$BJ#?t$N%V%i%&%6$K!"0[$J$k%I%a%$%s4V$G(B Cookie $B$rA^F~2DG=$JLdBj$N5?$$$N$"$k(B
$B$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O(B Microsoft Internet Explorer$B!"(BKDE
(BKonqueror$B!"$*$h$S(B Mozilla $B$G3NG'$5$l$F$*$j!"%;%C%7%g%s%O%$%8%c%C%/967b$r(B
$Be5-$N%V%i%&%6$K$*$$$FITE,@Z$JJ}K!$G(B Cookie $B$,B>$N%I%a%$%s$K(B
$BAw?.$5$l$F$7$^$&@_7W>e$NITHw$KM3Mh$7$F$$$^$9!#(B
(B
$B>\:Y$J>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11187
$BMWLs(B:
(BApache Web Server $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%P%C%U%!%*!<%P!<%U%m!<$NLd(B
$BBj$,$"$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O!"(Blibc $B%a%b%j%3%T!<4X?t$r;HMQ(B
$B$9$k:]$KM-8z$JJ8;zNsD9%Q%i%a!<%?$,M?$($i$l$J$$$H$$$&ITHw$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k$H!"(BBSD $B%Y!<%9$N(B Unix $B%7%9%F%`$GG$0U$N%3!<%I$rl9g!"$3$NLdBj$N1F6AHO0O$O%5!<%S%9ITG=>uBV(B
$B$K4Y$k$3$H$@$1$K8BDj$5$l$^$9!#(B
(B
(B36. HP Web Jetadmin Unspecified Arbitrary Command Execution Vuln...
(BBugTraq ID: 11188
(BRemote: $B$"$j(B
$B8xI=F|(B: Sep 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11188
$BMWLs(B:
(BHP Web Jetadmin $B$K$O!"G$0U$N%3%^%s%I$,\:YITL@$NLdBj$,$"$k$3$H(B
$B$,%Y%s%@$h$jJs9p$5$l$F$$$^$9!#$3$NLdBj$rMxMQ$9$k%j%b!<%H$N967be$GG$0U$N%3%^%s%I$,\:Y$OITL@$G$9!#>\:Y$J>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11189
$BMWLs(B:
(BMyServer $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%G%#%l%/%H%j%H%i%P!<%5%k$NLdBj$N5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6F~NO%G!<%?$N%5%K%?%$%:=hM}(B
$B$,IT==J,$G$"$k$N$,860x$G!"(BWeb $B%5!<%P$N%I%-%e%a%s%H%k!<%H$N30$KCV$+$l$F$$(B
$B$k%U%!%$%k$+$i=EMW$J>pJs$,C%$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/11190
$BMWLs(B:
(BPHP $B$K$O!"8=;~E@$G$O>\:YITL@$G$9$,!"G$0U$N%U%!%$%k$,%"%C%W%m!<%I$5$l$kLd(B
$BBj$,$"$k$3$H$,Js9p$5$l$F$$$^$9!#>\:Y$J>pJs$,8x3+$5$l$N967b$rhttp://www.securityfocus.com/bid/11191
$BMWLs(B:
(BBBS E-Market Professional $B$K$O!"%U%!%$%k$NFbMF$,O31L$9$k$$$/$D$+$NLdBj$N(B
$B5?$$$N$"$k$,Js9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6F~NO$5$l$?%G!<%?$KBP(B
$B$9$k%5%K%?%$%:=hM}$,==J,$G$O$J$$$3$H$KM3Mh$7$F$$$^$9!#(B
(B
$B%j%b!<%H$N967bH$K4X$9$kJ8;zNs$r%5!<%P(B
$B$K=hM}$5$;$k$3$H$K$h$j!"(BWeb $B$GFI$_pJs$,C%http://www.securityfocus.com/bid/11192
$BMWLs(B:
(BMozilla $B$*$h$S(B Mozilla Firefox $BN>%V%i%&%6$N(B tar.gz $B%"!<%+%$%V(B ($B%$%s%9%H(B
$B%l!<%7%g%s%U%!%$%k$,3JG<$5$l$F$$$k(B) $B$K!"%U%!%$%k%Q!<%_%C%7%g%s$NITHw$,B8(B
$B:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#Js9p$K$h$l$P!"FCDj$NJ}K!$G$3$N%"!<%+%$%V$r(B
$BCj=P$7$?>l9g!"$3$N%"!<%+%$%V$N%3%s%F%s%D$K$D$$$F!VFI$_e=q$-$^$?(B
$B$OJQ99$9$k$3$H$,2DG=$G$9!#(B
(B
(B41. vBulletin SQL Injection Vulnerability
(BBugTraq ID: 11193
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11193
$BMWLs(B:
(BvBulletin $B$K$O!"%j%b!<%H$+$i(B SQL $B9=J8$rCmF~2DG=$JLdBj$,$"$k$3$H$,Js9p$5(B
$B$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6F~NO$r(B SQL $B%/%(%j$KDI2C$9$kA0$K$=$NBEEv@-(B
$B$N3NG'$,E,@Z$K9T$o$l$J$$$3$H$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bZ>pJs$J$I$N%G!<%?%Y!<%9$NFbMF$rEp$`$3$H!"$*$h$S%G!<%?%Y!<%9$KBP$7$F967b(B
$B$r$7$+$1$k$3$H$,2DG=$H$J$j$^$9!#(B
(B
$B%P!<%8%g%s(B 3.0 - 3.0.3 $B$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11194
$BMWLs(B:
(BMozilla $B$N(B enablePrivilege $B%a%=%C%I$KLdBj$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
$B%f!<%6$,$=$l$^$G$K$=$N%W%j%s%7%Q%k$K%"%/%;%9$7$F$$$J$+$C$?>l9g!"(B
(BenablePrivilege $B%a%=%C%I$N0z?t%G!<%?$,%W%m%s%W%H%@%$%"%m%0$G%F%-%9%H$H$7(B
$B$F;HMQ$5$l$k$?$a!"%@%$%"%m%0$NFbMF$rIT@5$KA`:n$9$k$3$H$,2DG=$G$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11195
$BMWLs(B:
(Bgdk-pixbuf $B%i%$%V%i%j$K$O!"J#?t$NLdBj$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$BBh(B 1 $B$NLdBj$O!"(BBMP $B7A<0$N2hA|%U%!%$%k$r%G%3!<%I$9$k:]$KH/@8$7$^$9!#FCDj(B
$B$N>u672<$G(B gdk-pixbuf $B$,L58B%k!<%W$K4Y$C$F$7$^$&$?$a!"(BCPU $B;q8;$r>CHq$7!"(B
$B$3$N%i%$%V%i%j$rMxMQ$9$k%"%W%j%1!<%7%g%s$,$=$l0J>eu67$K4Y$j(B
$B$^$9!#(B
(B
$BBh(B 2 $B$*$h$SBh(B 3 $B$NLdBj$O!"(BXPM $B7A<0$N2hA|%U%!%$%k$r%G%3!<%I$9$k:]$KH/@8$7(B
$B$^$9!#0U?^E*$K:n@.$5$l$?2hA|%U%!%$%k$r=hM}$7$?>l9g!"(Bgdk-pixbuf $B$rMxMQ$9(B
$B$k%"%W%j%1!<%7%g%s$,%/%i%C%7%e$9$k!"$^$?$OG$0U$N%3!<%I$,http://www.securityfocus.com/bid/11196
$BMWLs(B:
(BlibXpm $B$K$O!"J#?t$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"(B
$B0U?^E*$K:n@.$5$l$?(B XPM $B7A<0$N2hA|%U%!%$%k$r=hM}$7$?>l9g$KH/@8$7$^$9!#6-(B
$B3&%A%'%C%/$,==J,$K9T$o$l$F$$$J$$$H$$$&ITHw$KM3Mh$7$F$*$j!"LdBj$rJz$($k%3(B
$B%s%T%e!<%?$X$NIT@5%"%/%;%9$r5v2D$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
$B967b\:Y$J>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11197
$BMWLs(B:
(BSMC 7004VWBR $B$*$h$S(B 7008ABR $B$NN>%G%P%$%9$K$O!"(BWeb $B4IM}%$%s%?%U%'!<%9$K$*(B
$B$$$FG'>Z$,2sHr$5$l$kLdBj$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$N(B Web $B4IM}%=%U%H%&%'%"$,G'>Z:Q$_%f!<%6$r3NG'$9$kJ}K!$KLdBj$,B8:_$7$^(B
$B$9!#Js9p$K$h$k$H!"$3$N%=%U%H%&%'%"$G$O!"4IM}%$%s%?%U%'!<%9$K%"%/%;%9$9$k(B
$B%f!<%6$r<1JL$9$k$N$K!"(BWeb $B%/%i%$%"%s%H$NAw?.85(B IP $B%"%I%l%9$,;HMQ$5$l$F$$(B
$B$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bhttp://www.securityfocus.com/bid/11198
$BMWLs(B:
(BGNU Radius $B$K%j%b!<%H$+$iMxMQ2DG=$J@0?t%*!<%P!<%i%s$,H/@8$9$kLdBj$N5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#(BGNU Radius $B$,Bg$-$JId9f$J$7?tCM$,4^$^$l$F$$$k(B
(BSNMP $BJ8;zNsD9$r=hM}$9$k$H!"%a%b%j%"%/%;%90cH?$,H/@8$7!"%5!<%S%9$,%/%i%C(B
$B%7%e$7$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11199
$BMWLs(B:
(BIBM OEM $B$N(B Microsoft Windows XP $B$*$h$S(B Windows XP SP1 $B$K$O!"%G%U%)%k%H$G(B
$B%Q%9%o!<%IITMW$G%"%/%;%9$G$-$k4IM}%"%+%&%s%H$,4^$^$l$F$$$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#(B
(B
$BJs9p$K$h$k$H!"(BIBM $B$N(B OEM $B%P!<%8%g%s$N(B Windows XP $B$*$h$S(B Windows XP SP1
$B$r%$%s%9%H!<%k$9$k:]$K4IM}http://www.securityfocus.com/bid/11200
$BMWLs(B:
$BJs9p$K$h$k$H!"(BMicrosoft Internet Explorer $B$K$O%f!<%6%;%-%e%j%F%#$N3NG'$,(B
$B2sHr$5$l$kLdBj$,B8:_$7$^$9!#$3$NLdBj$N860x$O!"0-0U$"$k%f!<%6$,%f!<%63NG'(B
$B$NMW7o$r<+L@$K2sHr$9$k$3$H$r2DG=$K$7$F$$$k@_7W>e$NITHw$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bhttp://www.securityfocus.com/bid/11201
$BMWLs(B:
(BSnitz Forums $B$K$O!"(BHTTP $B1~Ez$,J,3d$5$l$kLdBj$N5?$$$N$"$k$3$H$,Js9p$5$l$F(B
$B$$$^$9!#$3$NLdBj$O(B down.asp $B%9%/%j%W%H$NFCDj$N%Q%i%a!<%?Fb$KB8:_$7$^$9!#(B
$B$3$N%9%/%j%W%H$K$O!"(BGET $BMW5a$Nhttp://www.securityfocus.com/bid/11202
$BMWLs(B:
(BWindows XP SP2 $B$h$jA0$N(B Microsoft Windows XP $B$KF1:-$5$l$F$$$k(B
(BExplorer.exe $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$kLdBj$N5?$$$N$"$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"(BExplorer.exe $B$G(B TIFF $B7A<0$NFCDj$N2hA|%U%!%$%k$r=hM}$7$?>l9g(B
$B$KH/@8$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k%j%b!<%H$N967bl9g!"(B
$B%7%9%F%`;q8;$,>CHq$5$l$F$7$^$$$^$9!#$3$l$K$h$j!"%3%s%T%e!<%?$N%Q%U%)!<%^(B
$B%s%9$,Dc2<$7!"@55,%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$9$3$H$K$J$j$^$9!#(B
(B
(B51. Tech-Noel Pigeon Server Remote Denial Of Service Vulnerabili...
(BBugTraq ID: 11203
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11203
$BMWLs(B:
$BJs9p$K$h$k$H!"(BTech-Noel Pigeon Server $B$K%j%b!<%H$+$iMxMQ2DG=$J%5!<%S%9IT(B
$BG=>uBV$K4Y$kLdBj$,B8:_$7$^$9!#$3$NLdBj$O!"Nc30E*$J%f!<%6F~NO$Nhttp://www.securityfocus.com/bid/11204
$BMWLs(B:
(BSudo $B$K$O!">pJsO31L$NLdBj$N5?$$$,$"$k$3Js9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"(B-e $B%*%W%7%g%s$r;HMQ$7$F(B Sudo $B$r8F$S=P$7$?>l9g!"$^$?$O(B
(Bsudoedit $B%3%^%s%I$,8F$S=P$5$l$?>l9g$KH/@8$7$^$9!#FCDj$N>u67$K$*$$$F!"96(B
$B7bhttp://www.securityfocus.com/bid/11205
$BMWLs(B:
$B0U?^E*$K:n@.$5$l$?(B DVD $B$^$?$O(B MPEG $B$N%3%s%F%s%D$r2p$7$F!"(BDVD $B%5%V%T%/%A%c(B
$B!<(B
$B%3%s%]!<%M%s%H$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$7!"G$0U$N%3!<%I$,.$N%P%C%U%!$,3d$jEv$F$i$l$F$7$^$$$^$9!#$=$N(B
$B7k2L!"%P%C%U%!$K%G!<%?$,=q$-9~$^$l$k:]$K%R!<%WNN0hFb$NNY@\$7$?%G!<%?$,GK(B
$BB;$9$k2DG=@-$,$"$j$^$9!#(B
(B
$BM}O@E*$K$O!"$3$NLdBj$rMxMQ$9$k$3$H$K$h$j!"%a%b%jFb$N$[$\G$0U$N>l=j$KG$0U(B
$B$NC18l$r=q$-9~$`$3$H$,2DG=$G$9!#(BBSD $B%Y!<%9$N%7%9%F%`$HHf3S$7$?>l9g!"(B
(BLinux $B$*$h$S(B Windows $B$NF0E*%a%b%j3d$jEv$F%5%V%7%9%F%`$NJ}$,$h$j$3$NLdBj(B
$B$N1F6A$rhttp://www.securityfocus.com/bid/11206
$BMWLs(B:
(BXine-lib $B$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$,(B 2 $B$DB8:_$9$k$3$H$,Js9p(B
$B$5$l$F$$$^$9!#$3$l$i$NLdBj$rMxMQ$9$k967be=q$-$9$k$3$H$K$h$j!"%"%W%j%1!<%7%g(B
$B%s$Nl9g$KH/@8$7$^$9!#Bh(B 2 $B$NLdBj$O!"0U?^E*$K:n@.$5$l$?;zKk$N%F(B
$B%-%9%H%G!<%?$N2rl9g$KH/@8$7$^$9!#(B
(B
(BXine-lib $B$N%P!<%8%g%s(B 1-rc2 $B$+$i(B 1-rc5 $B$^$G$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11207
$BMWLs(B:
(BApple iChat $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J!"%j%s%/%"%W%j%1!<%7%g%s$,e$NITHw$KM3Mh$7$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967be$G!"G$0U$N%"%W%j%1!<(B
$B%7%g%s$rl9g!"$"$k$$$O967b$NJ}K!$G(B
$B%"%W%j%1!<%7%g%s$rI8E*%f!<%6$N%3%s%T%e!<%?>e$KJ]B8$7$F$$$k>l9g$K$O!"$3$N(B
$BLdBj$N1F6A$O$5$i$KBg$-$/$J$k2DG=@-$,$"$j$^$9!#(B
(B
(B56. Business Objects WebIntelligence Access Control Bypass File ...
(BBugTraq ID: 11208
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 17 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11208
$BMWLs(B:
(BWebIntelligence $B$K$O!"%"%/%;%9@)8f$,2sHr$5$l$k$?$a!"%"%W%j%1!<%7%g%s$+$i(B
$B%U%!%$%k$r:o=|$5$l$kLdBj$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%/%i%$%"%s%H$KBP$7$F%"%/%;%9@)8f$,E,MQ$5$l$F$$$k>l9g$K$N$_H/(B
$B@8$9$k$HJs9p$5$l$F$$$^$9!#%5!<%P$K$h$k%"%/%;%9@)8f$,Z:Q$_$N%f!<%6$K8B$j$3$NLdBj$r0-MQ$9$k$3$H$,$G$-$^$9!#(B
(B
(B57. Business Objects WebIntelligence Remote File Name HTML Injec...
(BBugTraq ID: 11209
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 17 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11209
$BMWLs(B:
(BBusiness Objects WebIntelligence $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%!%$%kL>(B
$B$N(B HTML $B%$%s%8%'%/%7%g%s$NLdBj$,$"$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O!"(B
$B%U%!%$%kL>$rF0E*$J(B Web $B%Z!<%8%3%s%F%s%D$K4^$a$kA0$K!"%U%!%$%kL>$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K9T$o$l$F$$$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B967bZMQ>pJs$rC%http://www.securityfocus.com/bid/11210
$BMWLs(B:
(BGoogle Toolbar $B$K$O!"(BHTML $B%3!<%I$rA^F~$5$l$kLdBj$N5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$^$9!#(BGoogle Toolbar $B$N(B ABOUT.HTML $B%Z!<%8$K$O!"(BHTML $B%3!<%I$*$h$S(B
(BJavaScript $B%3!<%I$,A^F~$5$l$kITHw$,B8:_$7$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bhttp://www.securityfocus.com/bid/11211
$BMWLs(B:
(BRsyncX $B$K$O!"%m!<%+%k$G8"8B>:3J$,2DG=$JLdBj$N5?$$$N$"$k$3$H$,Js9p$5$l$F(B
$B$$$^$9!#(B
(B
(BRsyncX $B$O(B setuid root $B$*$h$S(B setgid wheel $B$G%$%s%9%H!<%k$5$l$^$9!#(BRsyncX
$B$G$O(Broot $B8"8B$N9_3J$OE,@Z$K9T$o$l$k$,!"%5!<%I%Q!<%F%#$N%P%$%J%j$rhttp://www.securityfocus.com/bid/11212
$BMWLs(B:
(BRsyncX $B$K$O!"%;%-%e%j%F%#>eITE,@Z$JJ}K!$G0l;~%U%!%$%k$,:n@.$5$l$kLdBj$N(B
$B$"$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$N$?$a!":n@.$5$l$?0l;~%U%!%$%k$KM=B,(B
$B2DG=$J%U%!%$%kL>$,IU$1$i$l$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k%m!<%+%k$N967be=q$-$9$k$3$H$,2DG=$G$9!#(B
(B
(B61. DNS4Me Denial Of Service And Cross-Site Scripting Vulnerabil...
(BBugTraq ID: 11213
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Sep 17 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11213
$BMWLs(B:
(BDNS4Me $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$kLdBj!"$*$h$S%/%m%9%5%$%H%9%/%j%W%F%#(B
$B%s%0$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%Q%C%1!<%8$K(B
$BF1:-$5$l$F$$$k%S%k%H%$%s(B Web $B%5!<%P$,1F6A$rCHq$5$l!"%"%W%j%1!<%7%g%s$,%/%i%C%7%e$7$^$9!#(B
(B
$BBh(B 2 $B$NLdBj$O!"%f!<%6F~NO$5$l$?(B URI $B$N%5%K%?%$%:=hM}$,E,@Z$G$O$J$$$3$H$K(B
$BM3Mh$7$^$9!#$3$NLdBj$rMxMQ$9$k%j%b!<%H$N967be$G0-0U(B
$B$"$k%3!<%I$,%l%s%@%j%s%0$5$l$^$9!#%3!<%I$N%l%s%@%j%s%0$O1F6A$rZ>ZL@$,C%(B
$B$N967b$r(B
$B$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11214
$BMWLs(B:
(BYaBB $B$K$O!"4IM}l9g!"4IM}http://www.securityfocus.com/bid/11215
$BMWLs(B:
(BYaBB $B%U%)!<%i%`$N(B YaBB.pl $B%9%/%j%W%H$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%096(B
$B7b$rl9g!"LdBj$rJz$($k(B Web $B%5%$%H$N(B
$B%;%-%e%j%F%#%3%s%F%-%9%HFb$G%V%i%&%6$K$*$$$F967bhttp://www.securityfocus.com/bid/11216
$BMWLs(B:
$B8=;~E@$G>\:Y$OITL@$G$9$,!"(Bsmbd $B$*$h$S(B nmbd $B$NN>%G!<%b%s$K$O!"%5!<%S%9IT(B
$BG=>uBV$K4Y$k2DG=@-$N$"$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(Bsamba-vscan $BFb(B
$B$N%+%&%s%?$*$h$S%]%$%s%?$N\:Y$J>pJs$,8x3+$5$l$N%O%C%+!<$KBP$7$FH?http://www.securityfocus.com/news/9520
(B
(B2. Microsoft warns of poisoned picture peril
$BCx$N@=IJ$GH/8+$5$l$?LdBj$O!"(BJPEG $B%&%$%k%9$,$?$@$N8E(B
$B$$?@OC$G$O$J$$$3$H$r<(:6$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/9508
(B
(B3. Mitnick movie comes to the U.S.
$BCxhttp://www.securityfocus.com/news/9470
(B
(B4. WLANs go feral in corporate undergrowth
$BCx6H0wC#$O<+J,C#$G(B IT $B$r?d$7?J$a$k(B
$B$Y$/!"(BDIY $B$N(B Wi-Fi $B%"%/%;%9%]%$%s%H(B (AP) $B$r%*%U%#%9$KF3F~$7$^$7$?$,!"(BIT
$BItLg$O$3$&$7$?9T0Y$K5$$,IU$/$3$H$9$i$"$j$^$;$s$G$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/9553
(B
(B5. Merger creates world's biggest IT security services firm
$BCxhttp://www.securityfocus.com/news/9552
(B
(B6. Rise of the Botnets
$BCxeH>4|$O!"%>%s%S(B PC $B$,BgI}$KA}2C$7$^$7$?!#%;%-%e%j%F%#4k6H$N%7(B
$B%^%s%F%C%/%s%S(B PC $B$NJ?6Q?t$O!"(B
(B1 $B7n$+$i(B 6 $B7n$N4V$K0lF|$"$?$j(B 2,000 $BBf0J2<$+$i(B 30,000 $BBf(B ($B:G9b$G0lF|$"$?(B
$B$j(B 75,000 $BBf(B) $BA}Bg$7$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/9543
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. EPX Crypting Software 2.1
$B:nhttp://www.edronsoft.com/epx_pro.php
$BF0:n4D6-(B: Windows XP
$BMWLs(B:
(B
(BDES $B$*$h$S(B Triple DES $B$N6/NO$J%"%k%4%j%:%`$r;HMQ$7$F0E9f2=$9$k$3$H$K$h$j!"(B
$B<+J,$NJ8=q$rJ]8n$9$k$3$H$,$G$-$^$9!#0E9f2rFI$K;HMQ$9$k80$O(B USB $B%Z%s%I%i(B
$B%$%V(B ($B$"$k$$$O%U%m%C%T!<%G%#%9%/(B) $B$J$I$Nhttp://www.foundstone.com/s3i
$BF0:n4D6-(B: Windows XP
$BMWLs(B:
(B
(BWeb $B%"%W%j%1!<%7%g%s$N%;%-%e%j%F%#%H%l!<%K%s%0MQ%"%W%j%1!<%7%g%s(B
(B
(B3. ID-Synch 3.1
$B:nhttp://idsynch.com/
$BF0:n4D6-(B: AIX, AS/400, DG-UX, Digital UNIX/Alpha, HP-UX, IRIX, Linux,
(BMacOS, MPE/iX, Netware, OpenBSD, OpenVMS, OS/2, OS/390, RACF, Solaris,
(BSunOS, True64 UNIX, Ultrix, VM, VMS, VSE, Windows 2000, Windows NT
$BMWLs(B:
(B
(BID-Synch $B$O%(%s%?!<%W%i%$%:%f!<%68~$1$N%W%m%S%8%g%K%s%0%=%U%H%&%'%"$G$9!#(B
(BID-Synch $B$O!"%f!<%64IM}$N%3%9%H$r:o8:$7!"?75,%f!<%6$*$h$S:FEY3d$jEv$F$i(B
$B$l$?%f!<%6$,AGAa$/:n6H$r3+;O$G$-$k$h$&%5%]!<%H$9$k$H$H$b$K!"?WB.$+$D?.Mj(B
$B@-$N9b$$%"%/%;%9=*N;$rhttp://www.insecure.org/nmap/
$BF0:n4D6-(B: AIX, BSDI, FreeBSD, HP-UX, IRIX, Linux, NetBSD, OpenBSD,
(BSolaris, SunOS, UNIX
$BMWLs(B:
(B
(BNmap $B$O!"Bg5,LO%M%C%H%o!<%/$K$*$1$k%]!<%H%9%-%c%K%s%0$N$?$a$N%f!<%F%#%j(B
$B%F%#$G$9!#$^$?!"C10l%[%9%H$G$b==J,$K5!G=$7$^$9!#%9%T!<%I$,I,MW$J;~$b$"$l(B
$B$P!"%9%F%k%95!G=$,I,MW$J;~$b$"$j$^$9!#;~$H$7$F%U%!%$%"%&%)!<%k$N1*2s$,I,(B
$BMW$H$J$k$3$H$b$"$j$^$9!#$^$?!"J#?t$N%W%m%H%3%k(B (UDP$B!"(BTCP$B!"(BICMP $B$J$I(B) $B$r(B
$B%9%-%c%s$7$J$/$F$O$J$i$J$$$3$H$b$b$A$m$s$"$j$^$9!#(BNmap $B$G$O!"(BVanilla TCP
(Bconnect() $B%9%-%c%s!"(BTCP SYN ($B%O!<%U%*!<%W%s(B) $B%9%-%c%s!"(BTCP FIN$B!"(BXmas$B!"$^(B
$B$?$O(B NULL ($B%9%F%k%9(B) $B%9%-%c%s!"(BTCP ftp $B%W%m%-%7(B ($B%P%&%s%9%"%?%C%/(B) $B%9%-%c(B
$B%s!"(BIP $B%U%i%0$r;HMQ$7$?(B SYN/FIN $B%9%-%c%s$,%5%]!<%H$5$l$F$$$^$9!#(B
(B
(B5. DmpE32 -Symbian Executable Information Dumper 1.0
$B:nhttp://www.geocities.com/jfldars/DmpE32.zip
$BF0:n4D6-(B:
$BMWLs(B:
(B
(BSymbian Exe File $B%@%s%Q!<(B
(B*$B@x:_E*$J%^%k%&%'%"$NJ,@O$KM-MQ(B
(B
(B*$BpJs$rDs6!$7$^$9!#(B
(B - $B%X%C%@(B
(B (UID$B!"%;%/%7%g%s%5%$%:!"%(%s%H%j%]%$%s%H!"%"%W%j%1!<%7%g%s$N$*$h$S%G%U%)%k%H$N4X?t$N?t(B)
(B
(B6. IP Firewall Hook ATL/COM 1.2
$B:nhttp://www.modemwall.com/tipfwhook.htm
$BF0:n4D6-(B: Windows 2000, Windows XP
$BMWLs(B:
(B
(BIP Firewall Hook $B$O!"(BWindows Firewall-Hook Driver $B%F%/%N%m%8$r%Y!<%9$K$7(B
$B$?(B *$BL5NA$+$D%*!<%W%s%=!<%9$N(B* ATL/COM $B%3%s%]!<%M%s%H$G$9!#6/NO$J$3$N%Q%1%C(B
$B%H%U%#%k%?%j%s%0MQ%3%s%]!<%M%s%H$O!"(BWindows 2000/XP $B$GMxMQ$G$-$^$9!#%"%W(B
$B%j%1!<%7%g%s%U%!%$%"%&%)!<%k$N%5%s%W%k$,F1:-$5$l$F$$$^$9!#(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B(OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Index(es):
- Date
- Thread